CVE-2013-5300 Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php or (2) vulnmeter/sched.php; the (3) section parameter to av_inventory/task_edit.php; the (4) profile parameter to nfsen/rrdgraph.php; or the (5) scan_server or (6) targets parameter to vulnmeter/simulate.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alienvault open source security information management | <= 4.2.3 | No fix listed |
| alienvault open source security information management | = 1.0.4 | No fix listed |
| alienvault open source security information management | = 1.0.6 | No fix listed |
| alienvault open source security information management | = 2.1 | No fix listed |
| alienvault open source security information management | = 2.1.2 | No fix listed |
| alienvault open source security information management | = 2.1.5 | No fix listed |
| alienvault open source security information management | = 2.1.5-1 | No fix listed |
| alienvault open source security information management | = 2.1.5-2 | No fix listed |
| alienvault open source security information management | = 2.1.5-3 | No fix listed |
| alienvault open source security information management | = 3.1 | No fix listed |
| alienvault open source security information management | = 3.1.9 | No fix listed |
| alienvault open source security information management | = 3.1.10 | No fix listed |
| alienvault open source security information management | = 3.1.12 | No fix listed |
| alienvault open source security information management | = 4.0.3 | No fix listed |
| alienvault open source security information management | = 4.0.4 | No fix listed |
| alienvault open source security information management | = 4.1 | No fix listed |
| alienvault open source security information management | = 4.1.2 | No fix listed |
| alienvault open source security information management | = 4.1.3 | No fix listed |
| alienvault open source security information management | = 4.2 | No fix listed |
| alienvault open source security information management | = 4.2.2 | No fix listed |
References
- forums.alienvault.com
- packetstormsecurity.com
- 54264 third-party-advisory vendor-advisory
- 54287 third-party-advisory vendor-advisory
- 95813 vdb-entry
- 95814 vdb-entry
- 95816 vdb-entry
- 95817 vdb-entry
- 95818 vdb-entry
- 61456 vdb-entry
- alienvault-ossim-multiple-xss(85994) vdb-entry